Threats tagged 'ghsa-9rcf-27j4-vxg2'

This vulnerability allows a role that is supposed to be restricted to a specific list of Certificate Authorities (CAs) to gain full permissions for any request not tied to a CA. This includes the ability to use the bulk import endpoint to add new child CAs under existing ones, assign resources from the parent CA to the child, and create Route Origin Authorizations (ROAs) as specified in the request.